This vulnerability exists in the update_document, continue_document, delete_document, and get_content functions within app/routes/document.py of Axle-Bucamp MCP-Docusaurus up to commit 404bc028e15ec304c9a045528560f4b5f27a17e0. By manipulating the DOCS_DIR/path argument, an attacker can perform path traversal, potentially accessing files outside the intended directory. The vulnerability can be triggered remotely without authentication or user interaction. The product follows a rolling release model, complicating precise version tracking. No official remediation or patch has been published, and the vendor has not responded to the issue report. Public exploit code is available, increasing the risk of attack.

Successful exploitation allows an unauthenticated remote attacker to perform path traversal, potentially reading or modifying files outside the intended document directory. This could lead to unauthorized data disclosure or modification. The CVSS 4.0 base score is 6.9, indicating a medium severity impact with low vector complexity and no required privileges or user interaction. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should monitor the project repository for updates. Until a fix is available, consider implementing access controls or input validation at the deployment environment level to restrict path traversal attempts. Avoid exposing vulnerable endpoints to untrusted networks if possible.